This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json) Hash identifier: elrSa1R4s4G4ACrvbwlVsPzVSua//cUyXgRMHXt9sW4= Subject key identifier: 0E:14:67:38:42:A6:9F:B4:B8:58:B4:13:72:B6:C6:56:21:70:61:B0 Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb Certificate serial: 019C43221A4EDFCAFB4F1EC0B63D292F47E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:34 +0000 Manifest this update: Mon 09 Feb 2026 16:00:34 +0000 Manifest next update: Tue 10 Feb 2026 16:00:34 +0000 Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: TKcUsYkcn6pJHPJK0Ngno8lhZlifSLq/rq2MfwGvBnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:1a:4e:df:ca:fb:4f:1e:c0:b6:3d:29:2f:47:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb Validity Not Before: Feb 9 16:00:34 2026 GMT Not After : Feb 10 16:00:34 2026 GMT Subject: CN=0e14673842a69fb4b858b41372b6c656217061b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:dc:ef:87:5d:26:20:0d:d1:9d:a0:90:4a: fc:f2:89:c3:39:79:fe:5a:8f:5d:eb:de:55:95:b8: 9c:36:70:45:9a:fb:6c:76:61:75:03:df:a9:75:2a: 87:4e:cc:12:2a:e3:41:29:24:14:45:3f:3d:23:89: 3f:e0:3a:33:44:df:b6:31:c8:b4:0f:ae:31:e9:88: 48:ae:20:f3:71:a2:71:c0:61:01:6f:36:2d:7f:60: ac:ca:48:54:64:2c:96:f3:78:c6:a9:63:35:8c:c6: 2b:95:ae:67:44:ec:78:81:83:45:83:ab:f6:4f:1f: f3:31:3a:d8:66:b6:35:85:af:1f:21:36:60:be:ee: a9:01:ed:19:58:51:3b:c9:f8:37:b8:5a:07:fc:80: 53:d4:48:5b:38:1a:3c:6b:8e:77:1c:bb:ca:03:d9: 30:8b:e9:60:81:a0:75:55:14:3e:fe:61:87:dd:3c: 0f:d9:5e:35:f4:f7:3f:ea:6c:75:7e:de:18:e3:79: 91:97:96:42:c7:16:a8:6c:a5:91:48:2e:6a:90:fc: 2b:e2:3b:56:0f:27:d1:44:ad:44:9a:a8:b2:91:04: fa:47:2f:f1:83:b7:87:19:3e:ec:32:3a:fb:04:e1: d8:49:3f:f5:49:c6:77:82:fe:99:5b:66:21:5d:f9: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:14:67:38:42:A6:9F:B4:B8:58:B4:13:72:B6:C6:56:21:70:61:B0 X509v3 Authority Key Identifier: keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:73:49:62:fd:30:e6:39:57:69:40:de:19:e0:ae:c5:84:49: 5d:dc:e8:fd:ce:bd:7f:b9:a1:59:49:5e:27:1a:50:bd:64:c8: f6:59:e1:9e:fe:84:0a:90:10:46:e3:9b:dd:c9:91:4c:73:bb: 14:01:05:5f:c6:ac:65:56:83:26:cf:a5:a1:d0:6b:f3:1f:4d: fd:b3:8e:11:06:33:c3:bb:0f:fb:ce:6c:1f:2a:a7:5a:4d:45: 90:4d:c5:70:b6:bd:54:ff:56:fd:82:0f:02:a7:7f:f4:bb:71: e2:a0:ef:ac:19:6f:90:44:48:52:dc:f5:5f:23:43:b5:53:2c: 97:7f:12:7e:24:71:dd:c4:30:de:40:b1:ae:4b:31:dd:51:48: b5:21:1f:4a:e4:4d:40:f0:49:61:1c:4e:f1:5a:7e:69:cd:96: f5:fe:b7:8d:a3:8e:7e:23:36:03:dd:dc:be:1c:62:fe:6b:9a: 19:9b:37:33:47:a9:cd:33:8e:d0:b5:04:68:3f:b6:65:49:f3: e1:91:8b:64:80:49:15:06:14:97:8b:c9:c4:8a:e7:3c:07:5e: a3:75:18:2a:c4:d6:bc:8e:31:d2:16:40:ea:62:e3:bd:86:76: fd:42:b8:73:6f:f8:86:18:61:9f:9e:05:f9:3f:77:99:72:04: 05:d0:3f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhpO38r7Tx7Atj0pL0flMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj MmYzZmIwHhcNMjYwMjA5MTYwMDM0WhcNMjYwMjEwMTYwMDM0WjAzMTEwLwYDVQQD EygwZTE0NjczODQyYTY5ZmI0Yjg1OGI0MTM3MmI2YzY1NjIxNzA2MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnjc74ddJiAN0Z2gkEr88onDOXn+ Wo9d695VlbicNnBFmvtsdmF1A9+pdSqHTswSKuNBKSQURT89I4k/4DozRN+2Mci0 D64x6YhIriDzcaJxwGEBbzYtf2CsykhUZCyW83jGqWM1jMYrla5nROx4gYNFg6v2 Tx/zMTrYZrY1ha8fITZgvu6pAe0ZWFE7yfg3uFoH/IBT1EhbOBo8a453HLvKA9kw i+lggaB1VRQ+/mGH3TwP2V419Pc/6mx1ft4Y43mRl5ZCxxaobKWRSC5qkPwr4jtW DyfRRK1EmqiykQT6Ry/xg7eHGT7sMjr7BOHYST/1ScZ3gv6ZW2YhXflKWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4UZzhCpp+0uFi0E3K2xlYhcGGwMB8GA1UdIwQY MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2 LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXNJYv0w 5jlXaUDeGeCuxYRJXdzo/c69f7mhWUleJxpQvWTI9lnhnv6ECpAQRuOb3cmRTHO7 FAEFX8asZVaDJs+lodBr8x9N/bOOEQYzw7sP+85sHyqnWk1FkE3FcLa9VP9W/YIP Aqd/9Ltx4qDvrBlvkERIUtz1XyNDtVMsl38SfiRx3cQw3kCxrksx3VFItSEfSuRN QPBJYRxO8Vp+ac2W9f63jaOOfiM2A93cvhxi/muaGZs3M0epzTOO0LUEaD+2ZUnz 4ZGLZIBJFQYUl4vJxIrnPAdeo3UYKsTWvI4x0hZA6mLjvYZ2/UK4c2/4hhhhn54F +T93mXIEBdA/mw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:10 2026 by rpki-client